sneak dd2d256bc2 Test that an unparseable exp on /v1/image/ is refused with 400 (closes #72) ...

An exp that is not a whole number, or an empty exp=, is ignored today,
so a URL for a host that needs a signature gets 401 as if it had no exp.
This test asks for a 400 naming exp and the value instead; it fails
until the route refuses it. A URL without exp still gets 401.

Model: opus-5-5

2026-09-28 17:16:53 +00:00

..

auth_clientip_internal_test.go

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

auth_csrf_internal_test.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

auth_generate_internal_test.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00

auth.go

Refuse a q outside 1-100 on /v1/image/ with 400 (closes #134)

2026-09-28 17:46:49 +02:00

bodylimit_internal_test.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

bodylimit.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

csrf.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

handlers_internal_test.go

Refuse an empty fit on /v1/image/ with 400 (closes #139)

2026-09-28 18:07:11 +02:00

handlers.go

feat: blocked_networks config and extended SSRF ranges (closes #67)

2026-09-22 00:43:27 +02:00

healthcheck.go

Add doc comment to HandleHealthCheck method

2026-01-08 02:28:30 -08:00

image_signature_internal_test.go

Test that an unparseable exp on /v1/image/ is refused with 400 (closes #72)

2026-09-28 17:16:53 +00:00

image.go

Refuse an empty fit on /v1/image/ with 400 (closes #139)

2026-09-28 18:07:11 +02:00

imageenc_internal_test.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00

imageenc.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00